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HAZARD  ANALYSIS  OF  POLYURETHANE  FOAMS 


Wider  usage  of  polyurethane  foaming  equipment  in  packaging  operations 
is  projected  at  several  AMC  depots.  There  are  definite  hazards  involved 
with  the  handling,  usage  and  disposal  of  isocyanate  foams.  The  following 
data  identifies  these  hazards  and  establishes  guidelines  for  safe  opera- 
t ions . 

1 . Health  Hazards  : 

a.  The  presence  of  isocyanate  vapors  is  the  primary  hazard  in- 
volved in  the  use  of  isocyanate  foams.  The  accumulation  of  these  vapors 
in  very  low  levels  can  lead  to  severe  respiratory  reactions.  A ceiling 
threshold  limit  value  (TLV)  of  .02  ppm  has  been  established.  This  is  far 
below  the  odor  threshold  of  the  substance.  The  most  hazardous  of  the 
polyurethane  foams  considered  is  TDI  (Toluene  Diisocyanate ) . Its  high 
vapor  pressure  facilitates  the  accumulation  of  vapor  concentrations  that 
exceed  the  TLV  ceiling.  At  least  four  deaths  have  been  associated  with 
TDI  inhalation.  TDI  is  a sensitizer  for  both  pulmonary  and  epidermal 
irritations.  The  toxicity  upon  ingestion  is  considered  minimal.  The 
substance  is  also  considered  to  be  dangerous  to  the  eyes. 

b.  Foams  such  as  MDI  (Diphenylme thane  Diisocyanate  or  Methylene 
Bisphenylisocyanate)  and  PAPI  (Trade  name  of  50%  MDI  and  50%  MDI  Polymers) 
are  inherently  less  hazardous  due  to  their  lower  vapor  pressure. 
Diisocyanates  of  higher  molecular  weight  also  tend  to  be  less  toxic.  The 
over-all  hazard  levels  concerning  the  use  of  MDI  and  PAPI  are  considered  to 
be  of  a much  lower  order  than  those  of  TDI,  but  are  still  significant. 

c.  The  least  hazardous  of  all  the  foams  studied  is  the  newer 
Urea- formaldehyde  (UF)  variety.  These  foams  present  minimal  ventilation, 
skin,  eye,  toxicity,  and  disposal  hazards.  They  also  possess  desirable 
ecological  properties. 

d.  The  hazards  involved  are  also  dependent  upon  the  method  of 
application  of  the  foam.  Spray  applications  of  the  foams  create  the 
greatest  exposure  to  isocyanate  vapors.  In  cases  where  the  foams  are 
pumped  or  poured  into  containers,  the  area  directly  above  the  reacting  foam 
presents  the  greatest  hazard.  Although  definite  hazards  exist,  they  may 

be  eliminated  through  the  use  of  conventional  engineering  controls. 

e.  The  dust  resulting  from  the  sawing  of  the  foams  is  considered 
a mechanical  respiratory  hazard,  due  to  the  shape  of  the  particles  formed. 
Smoking  should  not  be  allowed  in  areas  where  isocyanate  vapors  or  dusts 
are  present,  since  pyrolysis  of  these  materials  results  in  the  formation 
of  more  hazardous  compounds . 
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2 .  Physical  Hazards: 


a.  There  are  several  inherent  physical  properties  of  the  foam 
that  contribute  additional  hazards  to  the  operations.  The  first  of  these 

is  the  heat  of  reaction  caused  by  the  combining  of  the  two  basic  components. 
This  heat  can  reach  momentary  temperatures  in  the  foam  as  high  as  400°F. , 
resulting  in  temperature  rises  from  room  temperature  up  to  225°F.  in  the 
item  being  packed. 

b.  Another  property  of  foam  that  could  cause  problems  is  the 
foam's  inability  to  rid  itself  of  static  electrical  charges.  The  foam  has 
a tendency  to  act  as  a large  capacitor  and  hold  large  potentials  for  what 
is  considered  to  be  a long  period  of  time.  Care  must  be  taken  to  insure 
that  electrically  sensitive  explosives  items  are  properly  grounded  when 
packed  in  foam. 

3 . Engineering  Controls: 

a.  The  engineering  controls  to  insure  a safe  workplace  are 
similar  for  all  types  of  foam,  the  only  difference  being  one  of  degree. 

The  primary  hazard,  the  inhalation  of  toxic  vapors,  is  most  easily 
rectified  by  providing  adequate  ventilation.  When  using  TDI  in  any 
process,  or  when  spraying  any  of  the  other  foams,  it  is  recommended  that 
forced  air  ventilation  be  provided  to  the  work  area.  The  process  should 

be  inclosed  in  a spray-paint  type  booth  and  be  properly  vented.  The  venti- 
lation system  should  maintain  an  air  velocity  of  at  least  100  ft. /min.  past 
the  worker.  If  air  sampling  discloses  that  the  TLV  is  exceeded  during  the 
operation  and  further  ventilation  is  not  feasible,  then  employees  must 
wear  respiratory  protective  devices.  It  is  also  recommended  that  the 
dispensing  equipment  be  interlocked  with  the  ventilation  equipment  to  in- 
sure an  adequate  air  flow  before  the  foam  is  released.  The  only  area  where 
the  TLV  has  been  exceeded  when  pouring  the  heavier  foams  has  been  within 
several  inches  of  the  top  of  a container  of  reacting  foam.  General  exhaust 
ventilation  is  considered  adequate  for  this  operation,  but  occasional  air 
samples  should  be  taken  to  insure  that  TLV  is  not  being  exceeded. 

b.  Eye  protection  in  the  form  of  goggles  is  recommended  for  all 
foam  operations.  Skin  contact  should  be  avoided,  especially  with  TDI.  In 
the  case  of  TDI,  gloves,  protective  creams,  or  other  forms  of  skin  protec- 
tion should  be  provided.  If  the  skin  becomes  contaminated  with  TDI,  it 
should  be  immediately  washed  off  with  a solution  of  5%  aqueous  ammonia 
mixed  with  107,  isopropyl  alcohol.  If  eyes  are  contaminated,  wash  with 
water,  keep  lids  open,  and  seek  medical  attention. 

4.  Medical  Considerations: 
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The  symptoms  of  overexposure  to  isocyanates  are  very  similar  to 
those  of  a cold  or  hay  fever.  Continued  overexposure  can  lead  to  a 
serious  respiratory  reaction  resembling  a severe  asthmatic  attack.  Initial 
exposure  to  low  concentrations  may  sensitize  certain  workers  to  a degree 
that  re-exposure  may  trigger  an  asthmatic  response.  In  light  of  this,  it 
is  recommended  that  both  medical  personnel  and  management  watch  for  these 
symptoms  in  the  operators.  Workers  who  have  a history  of  allergy  or 
respiratory  problems  should  not  be  allowed  to  work  in  foaming  areas. 

5 . Disposal : 

a.  Incineration  is  not  recommended  as  a method  of  disposal  for 
the  foams.  Carbonyl  fluoride,  various  nitrous  oxides  and  certain  cyanide 
gases  are  formed  during  combustion.  It  is  estimated  that  700  cubic  feet 
of  air  is  required  to  dilute  the  combustion  products  of  one  cubic  foot  of 
foam  to  the  TLV  of  10  ppm  for  the  cyanide.  Since  exposure  to  270  ppm  is 
considered  immediately  fatal,  only  self-extinguishing  foams  should  be 
used.  There  should  also  be  ample  procedures  to  notify  fire-fighting  per- 
sonnel of  the  hazards  if  foam  is  involved  in  a fire. 

b.  Methods  are  under  study  that  hydrolyze  80-90%  of  the  foam. 

The  solvent  in  this  process,  methyl  chloride,  and  the  basic  chemicals  of 
the  foam  are  almost  entirely  recoverable.  Sanitary  landfill  is  presently 
the  recommended  method  of  disposal,  but  attempts  should  be  made  to  re-use 
the  foam  as  packing  material. 

c.  From  an  environmental  standpoint,  waste  UF  foam  has  many  useful 
applications.  It  has  been  used  as  a base  for  sheep  feed,  as  a fertilizer, 
as  a biological  pollution  abatement  system,  as  a means  of  reclaiming  arid 
land,  and  in  the  commercial  production  of  grass  sod. 

■k-kkk: 
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DEMILITARIZATION  OF  AMMUNITION 
THROUGH  THE  DEACTIVATION  FURNACE,  APE  1236 


The  deactivation  furnace,  APE  1236,  was  developed  and  is  used  for: 

1.  Deactivating  small  arms  ammunition,  primers,  fuzes,  boosters, 
and  detonators . 

2.  Flashing  75-120mm  projectiles  after  washout  of  the  explosive 

charge . 

3.  Deactivating  certain  "drained"  chemical  bombs  and  rockets 
(sectionalized) . 

The  maximum  capability  of  this  furnace  has  not  yet  been  determined. 
Sectionalizing  bursters  and  propellant  components  has  permitted  14,300 
grains  (bursters)  and/or  160  ounces  (propellant)  to  be  burned  in  the 
furnace  at  once.  A restriction  of  600  grains  of  explosives  is  imposed 
(excluding  the  items  noted  above)  until  the  capability  can  be  determined. 
For  items  containing  more  than  this  specified  amount,  controlled  testing 
is  required  to  determine  the  temperature,  retort  speed,  and  feed  rate  that 
will  insure  complete  deactivation  of  the  item  and  provide  high  quality 
scrap  metal  (6,  P-24). 

This  article  will  discuss  one  such  test  which  involved  fuzed  57mm 
target  practice  projectiles.  The  total  explosive  content  of  this  item  is 
approximately  693  grains  (2,  35  4,  7)?  thus  establishing  a need  for  the 
test . 


With  reference  to  Figure  1,  the  test  consisted  of  placing  the  sample 
on  charge  conveyor.  A,  allowing  passage  through  retort,  C,  and  deposition 
on  discharge  conveyor,  E. 

The  interior  wall  of  retort,  C,  has  a helical  shape,  so  that  through 
rotation  the  item  is  gradually  advanced  toward  the  discharge  end.  Note 
that  retort,  C,  is  divided  into  quarters.  Reference  to  detonation  in  a 
particular  quarter  is  always  made  relative  to  its  feed  end. 

The  furnace  is  fired  through  burner,  D,  with  gases  exiting  through 
stack,  B. 

A stop  watch  was  used  to  record  both  time  of  residence;  i.e.,  the 
time  required  for  a sample  to  pass  through  retort,  C,  and  the  time  of  re- 
port; i.e.,  the  time  at  which  a report  was  noted. 
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Discharge  Conveyor 


A primary  consideration  in  this  type  of  test  is  determination  of  the 
location  at  which  detonation  occurs  in  the  furnace.  For  this  purpose,  the 
term  "detonation  ratio"  was  developed.  In  its  simplest  form,  this  ratio 
is  the  time  of  detonation  divided  by  the  time  of  residence. 


As  noted  earlier,  the  time  of  residence  can  be  determined  directly. 

It  has  been  shown  (5,  pp.  8-13)  that  the  time c£  detonation  can  also 
be  obtained  directly  from: 


= th  - (X  - 1)  (t.)  § 


(1) 


Where:  tp  = Time  of  detonation,  minutes, 

tp  = Time  of  report,  minutes. 

X = Number  of  report  = 1,  2,  3,  .... 

ts  = Time  between  samples  = spacing  between  samples  ( feet ) /conveyor 
speed  (feet /minute ) , minutes. 

N = Total  number  of  samples/run. 

R = Total  number  of  reports/run. 

The  detonation  ratio  for  any  report,  X,  now  becomes: 


tu  - (X  - i)  (O  £ 


rd  - 


(2) 


Where:  Rp  = Detonation  ratio. 

t^  = Time  of  residence,  minutes. 

Note  that  the  above  calculation  assumes  the  rotational  speed  of  the 
retort  is  constant. 

The  detonation  ratio  specifies  the  quarter  of  the  furnace  in  which 
the  detonation  occurs.  A simple  relationship  exists  between  Rp  and  loca- 
tion of  detonation  and  is  shown  in  Table  I. 

During  the  test  13  runs  varying  in  size  from  one  to  211  samples  were 
made.  This  resulted  in  the  processing  of  289  items  which  produced  235  re- 
ports . 
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TABLE  I 

RELATIONSHIP  BETWEEN  DETONATION  RATIO 
AND  LOCATION  OF  DETONATION  IN  THE  APE  1236 


Detonation  Ratio,  Rp  Location  of  Detonation  by  Quarter 


0 

0.25 

I 

0.26  - 

0.50 

II 

0.51  - 

0.75 

III 

0.76  - 

1.00 

IV 

Of  this  number,  78  samples  (60  reports)  were  processed  either  as 
singles  or  in  small  batches  not  exceeding  20  items.  The  remaining  211 
samples  (175  reports)  were  processed  in  a production-type  run,  approxi- 
mately 50  minutes  in  length. 

Throughout  the  test  the  retort  setting  corresponded  to  a rotational 
speed  of  1.3  rpm  (6,  p.  25) # At  this  setting  the  residence  time,  tr,  was 
approximately  8.2  minutes. 

Conveyor  speed  was  held  at  30  feet/minute,  and  in  those  runs  consist- 
ing of  more  than  one  item  the  spacing  between  samples  was  seven  feet. 

This  corresponds  to  a feed  rate  of  4.28  samples /minute  or  a time  between 
samples,  ts,  of  0.233  minutes. 

The  burner  and  stack  temperatures  were  held  at  approximately  1300°F. 
and  400°F. , respectively. 

The  detonation  ratios  were  calculated  for  each  report  noted  and  are 
arranged  in  histogram  form  in  Figure  2.  This  diagram  shows  the  relation- 
ship between  the  number  of  reports  noted  at  various  detonation  ratios  by 
quarter  of  the  furnace.  The  interval  chosen  for  Rp>  was  0.024.  Since  the 
retort  is  approximately  20  feet  in  length,  this  interval  corresponds  to  a 
distance  of  about  six  inches. 

The  data  presented  in  Figure  2 indicates  that  231  of  235  (approxi- 
mately 98.3%)  reports  occurred  in  the  third  quarter  of  the  retort.  This 
is  considered  to  be  an  optimum  general  location  The  four  reports 

occurring  outside  the  third  quarter  were  recorded  during  runs  of  single 
items  and  small  batches  (up  to  20  samples).  All  reports  from  the  produc- 
tion run  occurred  in  the  third  quarter. 

Further  analysis  of  Figure  2 reveals  that  85.1%  of  all  detonations 
occurred  in  the  range  of  detonation  ratios  between  0.551  and  0.675.  This 
corresponds  to  a distance  of  about  two  and  one-half  feet. 


7 


8 


4 


Detonation  Ratio,  Rn 


Based  on  the  results  of  the  test,  the  following  conclusions  were 
drawn: 


1.  A high  degree  of  control  was  demonstrated  in  processing  the 
57mm  items  through  the  APE  1236. 

2.  Complete  deactivation  of  the  ammunition  can  be  accomplished 
safely  under  the  specified  burner  and  stack  temperatures,  retort  speed, 
and  feed  rate  (conveyor  speed  and  spacing  between  samples). 

Finally,  it  should  be  noted  that  the  deactivation  furnace  is  a step 
forward  in  the  destruction  of  57mm  ammunition.  Originally,  this  item  was 
destroyed  in  a pit  at  the  rate  of  approximately  1660  units  per  day.  This 
operation  requires  a crew  of  seven.  Use  of  the  APE  1236  allows  an  equal 
or  better  production  rate  and  reduces  the  manpower  necessary  to  two,  thus 
being  advantageous  from  both  cost  and  safety  viewpoints. 
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PROTECTIVE  CLOTHING  AND  EQUIPMENT---  USE  IT! 


Mr.  Barry  J.  Huss,  an  Electronics 
Electronics  Division,  Letterkenny  Army 
injury  by  his  wearing  of  safety  glasse 
piece  of  braided  wire)  to  re- 
move excess  solder  from  a newly 
soldered  joint.  During  the 
process  the  solder  sucker 
slipped  off  of  the  joint  caus- 
ing molten  solder  to  be 
thrown  toward  the  worker. 


And  Sy  Augustine's  left  foot  is 
O.K. , just  bpuised  slightly,  thanks 
to  the  safety  shoes  he  wears  on  the 
job.  A warehouseman  in  the  Medium- 
Heavy  Processing  Branch,  Sacramento 
Army  Depot,  Sy  approached  a forklift 
truck  to  check  the  pallet  being 
moved.  Misjudging  the  radius  of  the 
lift  driver's  maneuver,  Sy  stepped 
into  its  path  (reverse  right  turn). 

The  4,000  pound  lift  backed  over  his 
left  foot.  Sy  (standing)  re-enacts 
the  incident  with  John  Willis  (center) 
and  Herb  Seevers , foreman  in  the  Heavy 
Processing  Branch. 


Fire  Control  Systems  Repairer, 

Depot,  was  spared  a serious  eye 
. He  was  using  a "solder  sucker"  (a 


Another  Letterkenny  employee  can 
verify  the  effectiveness  of  safety 
glasses.  Mr.  Francis  C.  Crouse,  a 
steam  cleaner  in  the  Vehicle  Division, 
was  steam-cleaning  a missile  control 
cabinet  with  a line  pressure  of  90 
ps i when  a piece  of  hardware  ricocheted 
from  the  cabinet,  striking  and  shatter- 
ing the  right  lens  of  his  safety 
glasses  (left  photo).  Ironically, 
before  starting  to  steam  clean, 

Mr.  Crouse  noted  that  he  had  forgotten 
his  safety  glasses  and  returned  to 
his  supervisor  to  get  some. 
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SYSTEM  SAFETY  ANALYSIS 


Continuing  description  of  the  forthcoming  revision  of  AMC  Pamphlet 
385-23,  in  this  issue  we  will  discuss  system  safety  analysis  and  show 
more  detail  of  some  typical  and  familiar  methods  that  are  in  use.  The 
primary  feature  of  analysis  is  that  it  depends  on  the  skill  and  know- 
ledge of  the  analyst.  This  individual  must  be  thoroughly  acquainted 
with  the  equipment  which  he  is  working  with,  or  the  process  that  he  is 
scrutinizing.  In  the  example  treated  in  this  article,  a very  familiar 
mechanical  device  has  been  chosen  - a truck  engine  - for  nearly  everyone 
is  acquainted  with  the  principles  of  the  internal  combustion  engine  and 
the  purpose  for  which  it  is  used.  Accordingly,  a common  fault  has  been 
analyzed  to  show  precisely  how  one  goes  about  constructing  a Fault  Tree 
(FT)  and  preparing  a Failure  Mode  and  Effect  Analysis  (FMEA).  Although 
it  will  not  be  discussed  in  detail,  another  kind  of  analysis  is  the 
"Piece  Part."  This  is  normally  done  by  the  reliability  people  and  is 
generally  used  for  accumulating  failure  mode  and  failure  rate  data  of  a 
specific  part.  For  example,  in  the  case  we  are  analyzing,  the  analyst 
would  examine  the  radiator,  hose,  water  pump  components,  and  other  ele- 
ments of  the  cooling  system  to  determine  the  probability  of  each  failing 
over  the  vehicle  lifetime.  This  kind  of  analysis  is  the  most  basic  and 
is  a supporting  element  of  more  general  types. 

A FMEA  is  not  always  required  before  a FT  is  constructed;  however,  it 
is  well  to  recognize  the  value  of  such  analyses  in  support  of  an  FT.  In 
this  case,  we  have  analyzed  two  components  of  an  engine  cooling  system, 
the  radiator,  and  hose  (Fig  1).  Note  that  a specific  format  is  used  which 
shows  the  component,  its  failure  mode,  effect  on  the  sub-system  and  system, 
the  hazard  level  (per  MIL- STD-882)  and  remarks  which  describe  further  the 
conditions  applying  to  the  failure  mode. 


FAILURE  MODE  AND  EFFECT  ANALYSIS  WORKSHEET 


Component 

Failure  Mode 

Effect  On 

Hazard 

Remarks 

Sub  System 

System  1 

Level 

Radiator 

hose 

Splits 

Loss  of 
coolant 
from  rad- 
iator 

Burned- 
out  eng-' 
ine 

Marginal 

10  minutes 
operation 
w/ o damage 
to  engine 
if  coolant 
is  lost 

Radiator 

Loss  of 
coolant 

Engine 

overheats 

do 

Marginal 

Do 

Figure  1.  Failure  Mode  and  Effect  Analysis 
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FAULT  TREE 


(Loss  of 
coolant  if 
hose  splits) 

Equation  - Qualitative 

El  = (E2)(F3) 

E2  = XI  + HI  + SI 
E3  = Z1 

thus, 

El  = (XI  + HI  + S1)(Z1) 

NOTE:  R1  is  ignored,  since  Z1  is  the 

result  of  all  other  events  which 
contribute  to  it. 


Equation  - Quantitative 


XI  = 

1 x 10"3 

HI  = 

1 , 

SI  = 

1 x 10"u 

Z1  = 

1 

and, 

El  = 

(1  x 10”3  + 

1 + 

1 x 10-|l)(l) 

= 

(1  x 10'3  + 

.1  x 

10"3)(1) 

= 

1.1  x 10"3, 

the 

probability 

of  El  occurring 

Figure  2.  Fault  Tree  Analysis  of  a 
Burned-out  Truck  Engine 
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After  completing  the  FMEA,  we  transfer  the  detail  to  the  FT.  We  must 
however,  select  the  command  event  - in  this  case  a burned-out  engine  - 
before  the  remainder  of  the  FT  can  be  drawn.  Although  many  other  events 
can  cause  a burned-out  engine,  for  purposes  of  this  FT,  only  loss  of  coolant 
and  continued  operation  for  10  minutes  is  considered  (Fig  2).  The  explanation 
that  follows  refers  to  the  FT  and  the  numbered  events,  described  further  below: 

E - Event 

X - Fault  either  fully  developed,  or  possible  of  additional 
description 

S - Secondary  Fault,  data  for  which  is  undeveloped. 

Z - Inhibit  function,  a condition  which  must  be  described. 

H - An  event  that  is  expected  to  occur. 

R - Another  part  of  the  FT  containing  further  events. 

For  the  logic  to  operate  properly,  the  AND  gate  immediately  below  the 
command  event  (El)  requires  both  sub-events  (E2  and  E3)  to  operate  in  se- 
quence. In  other  words,  one  might  lose  coolant,  but  if  he  stopped  the  engine 
within  10  minutes,  damage  to  it  would  be  avoided.  In  discussion  of  the  sub- 
event E2,  there  is  one  primary  fault  (XI),  a split  hose,  that  will  always 
cause  a coolant  loss.  The  expected  event  HI  is  obvious,  whereas  a manufacturing 
flaw  in  the  hose  would  not  normally  be  detected.  Thus,  secondary  fault  SI, 
is  placed  in  the  undeveloped  category  and  assigned  the  value  of  1 for  quanti- 
tative calculation.  With  regard  to  the  sequence  of  these  faults,  any  one  can 
operate  through  the  OR  gate  to  cause  a coolant  loss  and  one  should  immediately 
recognize  that  HI  and  SI  contribute  to  the  primary  fault  XI  and  could  also  be 
amplified  as  the  real  causes  of  the  primary  fault.  It  is,  therefore,  possible 
to  develop  primary  faults  further  as  follows: 


Development  of  secondary  faults  is  not  normally  done  unless  all  other 
primary  faults  fail  to  disclose  a reason  for  the  command  event  to  occur.  In 
this  case,  development  of  subsidiary  reasons  for  a secondary  fault  would  take 
much  the  same  path  as  those  of  a primary  fault. 
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Turning  now  to  the  sub-event  E3  and  to  illustrate  how  an  inhibit  gate 
is  used,  the  conditional  situation  is  the  10  minute  operation  of  the  engine 
after  coolant  loss,  mentioned  earlier.  In  effect,  this  gate  merely  shows 
the  condition  that  must  occur  for  the  event  on  which  it  is  acting  to  take 
place.  The  R1  transfer  symbol,  below  the  inhibit  gate,  is  used  to  transfer 
the  FT  to  another  page  where  further  sub-events  would  be  described.  It 
would  have  significance  if  the  quantitative  value  assigned  from  lower  levels 
of  the  FT  would  influence  the  sub-event  to  which  it  is  transferring  information. 
An  inhibit  gate  is  usually  assigned  a value  of  1 in  the  calculations,  since 
it  is  also  expected  to  occur  and  must  be  considered  as  the  "worst-case"  contri- 
buting to  the  final  command  event. 

After  all  the  qualitative  effects  are  drawn  in  the  FT,  the  equation  can 
be  constructed,  using  conventional  Boolean  algebra  theorems.  Referring  to 
Fig  2,  the  qualitative  equation  is  first  written,  based  on  the  three  major 
events;  remembering  that  an  AND  gate  results  in  a product  (x)  whereas  an  OR 
gate  produces  a sum  ( + ):  El  = (E2ME3).  Sub-event  E2  results  from  an  OR 

gate  and  the  equation  is:  E2=  XI  + HI  + SI.  Sub-event  E3  is  a single  problem 
and  is  equal  to  Zl  which,  as  mentioned  before,  has  a value  of  1.  The  final 
equation,  therefore,  is  El  = (XI  + HI  + SlMZl).  Certain  probabilities  of 
occurrence  were  selected  arbitrarily  for  this  illustration  and  are  shown  also 
on  Fig.  2.  Substituting  these  in  the  equation, 

El  = (1  x 10"3  + 1 + 1 x 10~4)(1) 

= 1.1  x 10" 3 , 

the  probability  that  a burned-out  engine  will  result  at  least  once  in  a 
thousand  if  it  is  operated  without  coolant  for  over  10  minutes. 

Quantitative  values  for  various  sub-events  may  not  be  readily  available, 
in  particular  where  procedural  elements  are  to  be  analyzed  or  where  personnel 
errors  are  evident  as  primary  causes.  In  these  cases,  it  is  quite  satisfactory 
to  draw  only  a qualitative  tree  and  by  so  doing  determine  the  most  prominent 
error  paths.  Once  this  is  done,  elimination  of  the  discovered  sub-events  can 
be  accomplished  by  changing  procedures,  eliminating  man/machine  interfaces,  or 
improving  maintenance  operations  in  those  particular  instances.  It  is  empha- 
sized that  quantification  of  fault  trees  mainly  indicates  that,  based  on  the 
best  estimate  of  certain  faults  occurring,  some  finite  estimate  of  the  command 
event  probability  will  be  shown.  In  many  cases,  these  figures  are  so  remote 
as  to  be  incomprehensible.  As  a general  rule,  a probability  of  occurrence  of 
1 x 10" ^ (one  in  a million)  is  recognized  as  remote  and  lower  probabilities, 
e.g.,  1 x 10" 9,  reach  into  realms  that  the  human  mind  cannot  readily  comprehend. 
This  is  not  to  say,  however,  that  an  event  occurring  only  once  in  a billion 
could  not  happen  to  any  one  of  us  at  any  moment.  It  merely  means  that  for 
statistical  purposes  it  is  insignificant  and  one  should  not  lose  too  much  sleep 
because  of  it. 
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In  the  example  used  in  this  paper,  many  would  probably  argue  that  an 
engine  would  always  burn  out  if  operated  without  coolant  for  over  ten 
minutes;  however,  just  as  many  would  argue  in  opposition  and  present  illus- 
trations to  show  that  he  had  driven  from  point  A to  B far  in  excess  of  that 
time  without  any  problem  except  for  a somewhat  uncomfortable  feeling  that 
he  might  not  make  it.  What  wasn't  done  here  was  to  also  state  that  if  you 
operated  at  full  performance  capability  of  the  engine  under  full  load,  the 
condition  was  valid.  Such  explanations  would  normally  be  covered  in  the 
R1  Transfer  and  continued  in  other  parts  of  the  fault  tree. 

From  such  detail  in  a fault  tree,  procedures  could  be  generated  to  caution 
the  driver  as  to  what  action  he  might  take  to  reduce  the  probability  of  a burn- 
out, such  as  operating  at  low  speed,  and  avoiding  other  stresses  that  would 
overheat  the  engine  beyond  the  capability  of  its  natural  cooling  capability 
without  coolant.  While  such  procedures  may  appear  simple  and  natural  to  all 
of  us  who  have  been  steeped  in  the  tradition  of  the  motor  vehicle,  they  are 
mentioned  to  show  the  kind  of  considerations  that  can  result  from  analysis  of 
a system. 

As  the  systems  and  functions  of  a system  become  more  complex,  it  can  readily 
be  seen  that  a multitude  of  considerations  must  be  given  to  many  individual  com- 
ponents of  any  system.  In  the  final  analysis  (not  intended  to  be  a pun),  analysis 
is  of  no  value  unless  it  identifies  a hazard  or  shows  that  none  exists  and  sub- 
stantiates both  situations.  Likewise,  neither  situation  can  be  identified  unless 
an  analysis  is  performed. 

Because  analysis  will  be  of  little  value  unless  some  criteria  is  avail- 
able to  base  it  upon,  there  must  be  a detailed  definition  of  hazard  levels 
and  how  to  apply  them  to  any  given  situation.  Accordingly,  hazard  level 
versus  hazard  resolution  must  be  considered  at  the  onset  of  any  analysis. 

Following  the  guidelines  of  MIL-STD-882,  the  usual  output  from  a safety 
analysis  includes  a listing  of  potential  hazards  categorized  according  to 
their  severity.  As  applied  in  the  FMEA  (Fig  1)  a "marginal"  hazard  cate- 
gory was  chosen  to  describe  the  effect  of  coolant  loss  and  a burned-out 
engine  in  the  vehicle.  Since  this  was  a relatively  simple  analysis, 

"marginal"  was  chosen  because  a burned-out  engine  does  not  present  any 
particular  safety  hazard;  the  operator  being  well  able  to  control  the 
effects.  To  be  somewhat  more  specific,  however,  we  will  now  discuss  a 
more  cogent  problem;  how  to  prevent  a drunk  driver  from  causing  Category 
IV  "catastrophic"  hazard.  This  becomes  more  complicated,  because  there 
are  facets,  other  than  mere  engineering,  that  must  be  considered.  In 
transition  to  the  main  problem,  some  background  is  necessary. 

As  discussed  in  the  literature,'*'  undesired  events  may  be  classified 
by  modifying  the  broad-based  series  of  four  hazard  levels  presented  in 
MIL-STD-882  to  suit  the  system  under  study.  These  levels  are: 

I.  Category  I - Negligible:  Conditions  will  not  result  in  personnel 

injury  or  system  damage. 
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2.  Category  II  - Marginal:  Conditions  can  be  counteracted  or  con- 

trolled without  injury  to  personnel  or  major  system  damage. 

3.  Category  III  - Critical:  Conditions  will  cause  personnel  injury 

or  major  system  damage,  or  will  require  immediate  corrective  action  for 
personnel  or  system  survival. 

4.  Category  IV  - Catastrophic:  Conditions  will  cause  death  or 

severe  injury  to  personnel,  or  system  loss. 

One  interpretation  of  these  four  levels  is  that  a category  I hazard 
is  not  really  a "hazard,"  but  a "normal  condition"  which  will,  of  course, 
vary  according  to  the  system.  A category  II  hazard  is  one  that  can  be 
controlled  by  applying  some  specific  preventive  action.  Category  III  hazards 
require  immediate  application  of  the  specified  preventive  action,  and  if 
the  time  limit  implied  in  the  category  III  hazard  is  not  met,  it  will  move 
to  the  "IV"  level. 

After  a hazard  has  been  identified  and  categorized,  attempts  are  made 
to  resolve  it  to  an  "acceptable  level."  For  this  discussion,  the  upper 
limit  of  "acceptable  level"  is  placed  at  category  II.  This  does  not  mean 
that  effort  is  not  expended  toward  reducing  a "II"  to  a "I,"  rather  it  means 
that  the  most  severe  hazard  that  can  be  tolerated  in  the  system  is  the  cate- 
gory IX  variety.  Trade-offs  can  be  made  up  to  the  category  II  level,  but 
above  this  point,  the  system  is  unacceptable  from  a safety  point  of  view. 

Four  methods  of  hazard  resolution  ranked  in  a descending  order  of 
desirability  are  outlined  in  MIL-STD-882: 

1.  Elimination  through  design. 

2.  Reduction  of  hazard  significance  through  the  use  of  safety  devices. 
Such  devices  should  not  require  human  intervention  but  should  operate  auto- 
matically if  the  specified  condition  arises. 

3.  Placement  of  warning  devices;  e.g.,  audio  or  visual  indicators,  in 
the  system  to  make  personnel  aware  of  the  existence  of  a hazardous  condition. 
These  devices  require  human  intervention  to  respond  to  the  warning  produced. 

4.  Preparation,  dissemination,  and  enforcement  of  special  operating 
procedures  regarding  an  identified  hazardous  condition. 

These  four  methods  provide  a means  of  hazard  reduction  to  an  acceptable 
level.  This  discussion  suggests  that  the  relationship  between  hazard  level 
and  method  of  resolution  is  similar  to  that  shown  in  Table  1. 

In  examining  the  Table  to  determine  its  validity,  consider  first  the 
most  desirable  method  of  resolution;  i.e.,  elimination  through  design.  In 
this  case  it  should  be  fairly  obvious  that  adherence  to  this  approach  will 
reduce  the  effect  of  the  hazard  to  the  "I"  or  "normal"  level;  i.e.,  the 
term  "elimination"  implies  complete  removal  of  the  hazard. 
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TABLE  1 

HAZARD  LEVEL  VERSUS  METHOD  OF  RESOLUTION 


Method  of 

Hazard  level 

(after  corrective  action) 

resolution 

(1) 

(2) 

(3) 

(4) 

Elimi nate 

Use  of 

Use  of 

Special 

Hazard 

Through 

Safety 

Warning 

Operating 

level  (be- 
fore cor- 
rective action) 

Design 

Devices 

Device 

Procedures 

I 

1 

I 

I 

I 

11 

I 

I 

I 

II 

III 

I 

I 

II 

III 

IV 

I 

II 

III 

IV 

In  order  to  examine  the  second,  third,  and  fourth  methods  of  resolution, 
assume  that  attention  is  to  be  directed  toward  resolving  the  catastrophic 
event  of  vehicle  collision  resulting  from  driver  intoxication. 

Following  the  guidelines  earlier,  the  series  of  hazard  levels  for  this 
situation  may  be  written  as: 

1.  Category  i:  Driver  can  pass  sobriety  test. 

2C  Category  IIS  Driver  cannot  pass  sobriety  test  and  starts  vehiclec 

3.  Category  III;  Vehicle  moves  into  traffic  and  collision  becomes 
imminent . 

4.  Category  IV:  Collision  occurs. 

Consider  the  use  of  special  procedures;  e.g.,  "rules  of  the  road,"  to 
reduce  the  hazard.  Although  this  approach  may  prevent  some  incidents,  it 
does  not  attack  the  hazard  itself  and  is  actually  a weak  link  in  the  achieve- 
ment of  system  safety  because  of  difficulty  in  verifying  communication  of 
the  procedure  to  using  personnel.  Therefore,  Table  1 shows  no  significant 
reduction  in  hazard  level  when  special  procedures  are  the  only  method  of 
hazard  resolution  used.  This  reasoning  is  perhaps  somewhat  conservative; 
however,  many  accidents  have  occurred  as  a result  of  failure  to  follow  an 
established  procedure. 

Next  consider  the  use  of  some  warning  device;  e.g.,  a decal  posted 
inside  the  vehicle  warning  against  driving  while  intoxicated  or  a flashing 
signal  which  operates  for  a specified  time  when  the  vehicle  is  started,  to 
reduce  the  effect  of  the  hazard.  Since  some  physical  means  is  used  in  an 
attempt  to  preclude  the  collision,  this  approach  will  reduce  category  II, 

III  and  IV  hazards  by  one  level.  A greater  reduction  is  not  feasible  since 
the  driver  must  respond  and  react  to  the  warning  produced. 
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A third  alternative  is  use  of  safety  device,  e.g.,  an  "alcohol  safety 
interlock  system"^  or  a breath  analyzer  incorporated  in  the  automobile 
ignition  system  which  would  prevent  starting  the  engine  by  anyone  who  has 
celebrated  with  the  booze  too  much.  Although  many  probably  believe  such 
a device  would  be  an  infringement  on  personal  rights  to  some  extent,  it 
does  have  the  advantage  of  attacking  the  basic  hazard  by  breaking  the 
sequence  of  events  at  their  inception.  It  prevents  the  drunk  driver  from 
starting  his  car  engine,  and  thus  beginning  the  chain  of  events  leading 
to  the  Category  IV  hazard.  We  can  conclude,  therefore,  that  such  devices 
would  reduce  Category  IV  hazards  (and  both  Category  II  and  III  hazards) 
to  Category  II  and  I,  respectively  (Table  1). 

It  is  recognized  that  the  relationships  discussed  may  require  modifi- 
cation for  other  situations  which  are  purely  engineering  matters  and  do 
not  contain  the  emotional  involvement  of  people  to  the  extent  described. 

The  concept  presented  in  Table  1 is,  however,  logically  developed  and  will 
allow  trade-offs  with  respect  to  hazard  resolution  in  any  area.  More 
importantly,  such  an  approach  provides  a semi - quantitative  method  for  deter- 
mining the  effectiveness  of  applying  familiar  criteria  to  reduce  the  great 
potential  that  man  has  for  getting  into  trouble.  It  should  be  made  clear 
that  we  are  neither  supporting,  nor  decrying  inclusion  of  an  "alcohol  safety 
interlock,"  but  it  was  used  merely  as  an  example  to  illustrate  the  metho- 
dology for  determining  hazard  levels  and  their  resolution. 


REFERENCES : 

1.  "Hazard  Classification"  AMC  Safety  Digest  (AMCP  385-106),  Mar-Apr  1972, 

pp . 6- 8 . 

2.  Kielty,  J.,  "Will  Cars  Say  No  to  Drinking  Drivers?,"  Traffic  Safety, 

Vol . 72,  No.  4,  April  1972,  pp.  10-13,  39. 


18 


Here  are  ten  questions  that  will  test  your  knowledge  of  safety  re- 
quirements that  you  will  need  under  different  circumstances.  Answers  to 
these  questions  may  be  found  in  the  AMCR  385-series  and  the  AMC  Supplements 
to  the  AR  385-series.  How  many  can  you  answer  without  referring  to  the 
regulations  ? 

1.  What  protection  against  lightning  is  afforded  by  a separately  mounted 
shielding  system  (mast  type)? 

Answer  and  reference: 

2.  What  danger  zones  must  be  established  where  cook-off  possibilities 
exist  during  weapons  testing? 

Answer  and  reference: 

3.  In  regard  to  machine  guarding,  what  is  "point-of-operat ion? " 

Answer  and  reference : 

4.  What  is  the  maximum  electrical  resistance  permitted  per  shoe  for  con- 
ductive footwear? 

Answer  and  reference: 

5.  How  much  water  must  be  available  for  fire  fighting  in  load  line  and 
in  explosives  manufacturing  areas? 

Answer  and  reference: 

6.  What  procedure  must  be  followed  when  mixing  acid  with  water? 

Answer  and  reference : 
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7.  How  should  AMC  installations  procure  safety  promotional  materials 
which  are  not  available  from  the  USAMC  Field  Safety  Agency? 

Answer  and  reference : 

8.  What  are  the  physiological  effects  of  mustard  agent? 

Answer  and  reference: 

9.  What  is  the  storage  compatibility  group  and  quantity-distance  class 
of  demolition  snake  charges? 

Answer  and  reference: 

10.  Who  is  required  to  complete  Section  E,  "Accident  Analysis  Data,"  of 
the  DA  Form  285? 

Answer  and  reference: 


MILL  I ON  MILE  CLUB  PLAQUE  PRESENTED 
TO  LOUISIANA  ARMY  AMMUNITION  PLANT  DRIVER 


Joseph  M.  Bruner  (center),  Heavy  Truck  Driver,  Louisiana  Army  Ammuni- 
tion Plant,  is  shown  receiving  a National  Safety  Council  Million  Mile  Club 
plaque  from  J.  M.  Richardson,  Safety  Director,  Sperry  Rand  Corporation, 
operating  contractor  at  the  ammunition  plant.  Looking  on  is  J.  S.  Goins, 
Internal  Traffic  Manager.  Mr.  Bruner  was  presented  the  award  for  driving 
26,925  hours  without  a preventable  accident. 
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COFFEE,  TEA  AND  SAFETY 


CW2  John  M.  Leake,  Aviation  Officer 
US  Army  Arctic  Test  Center 


Know  what  a PPB  is?  Well,  you  can  bet  your  Bippy  you  don't  want  to 
bet  your  PPB.  Any  flight  without  a PPB  (Passenger  Preflight  Briefing) 
is  a gamble;  not  only  with  the  pilot  and  crew's  safety,  but  also  with 
the  well-being  of  the  passengers. 

Next  time  you're  flying  commercially,  and  you've  got  that  good 
looking  wisp  of  a stewardess  cornered  in  the  back  cabin  showing  her 
your  wings  and  talking  of  the  real  world  of  flying,  ask  her  about  PPB. 

She  may  just  relinquish  a few  of  her  secrets  and  send  you  along  your 
way,  positive  that  you  can  keep  your  passengers  just  as  content. 

The  history  of  the  PPB  extends  back  to  the  dawning  period  of 
aviation.  The  first  record  being  that  of  a PWB  (Post  Wreck  Briefing). 
This  PWB  was  conducted  when  an  enterprising  pilot  realized  just  how 
many  doors  it  could  open  to  his  future,  especially  the  one  he  was 
trapped  behind  when  his  airplane  crashed.  A little  late  was  better 
than  never,  and  it  stood  as  a good  moral  for  future  aviators:  "A  PPB 

before  leaving  the  ground  is  worth  gold  if  the  airplane  goes  down." 

The  PPB  has  developed  through  the  years  in  a direct  relationship 
with  the  progress  made  in  the  field  of  aviation.  Confrontation,  how- 
ever, has  been  the  best  teacher  of  the  importance  of  the  PPB.  Every 
Army  aviator  has  been  confronted  with  at  least  one  example  of  a passenger 
pulling  a disabled  crewmember  out  of  a burning  plane,  or  the  safe 
unloading  of  a crowded  plane  in  an  emergency.  Incidents  of  this  nature 
are  frequent,  but  just  one  case  of  life  over  death  is  enough  to  justify 
the  value  and  need  for  a good  PPB  for  every  flight. 

Certain  items  are  standard  in  all  PPB's,  while  the  flight  envelope 
and  characteristics  of  the  airplane  will  determine  specific  items.  How- 
ever, all  PPB's  should  be  oriented  around  the  need  of  the  passenger. 

Position  for  Impact  - Proper  body  position  to  assume  prior 

to  impact  is  determined  by  type  air- 
craft, fixed  or  rotary  wing. 

Aid  Kits  - Number  and  location  of  first  aid  kits 

Seatbelts  - Correct  tightness  for  seatbelt  and 

times  when  it  must  be  worn  in  Army 
aircraft;  passengers  should  remain 
belted  in  at  all  times,  if  possible. 
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Smoking  Procedure 


- Permissible  limits  for  smoking  in 
or  around  an  aircraft. 

Exiting  Procedure  - Number  and  location  of  all  emer- 

gency exits,  i.e.,  window  exits, 
etc.;  proper  method  of  releasing 
jettison  handles,  and  proper  pro- 
cedure for  exiting  the  aircraft 
in  an  emergency. 

Number  and  Location  of  Fire  Extinguishers. 

Ground  Safety  - Proper  procedures  to  be  used  during 

aircraft  ground  operations,  to  in- 
clude entering  and  exiting  of  air- 
craft. Specific  danger  areas  should 
be  pointed  out,  especially  around 
helicopters . 

Emergency  Survival  Gear  - The  climatic  extremities  under  which 

Army  aircraft  operate  require  pilots 
to  insure  passengers  realize  the 
importance  of  special  survival  gear. 
This  should  include  the  procedure 
for  removing  secured  gear  from  the 
aircraft. 

Remain  Calm  - This  should  be  stressed  more  than 

any  other  point.  The  PPB  is  of  lit- 
tle use  unless  all  personnel  are  con- 
ditioned to  adhere  to  the  instructions 
in  an  emergency  situation. 

Only  Instinctive  Reactions  stemming  from  a proper  and  thorough  briefing 
can  insure  safe  rescue  in  an  emergency  situation.  As  for  the  pilots,  many 
emergency  situations  leave  little  time  to  think  or  ask  the  question,  "What 
am  I to  do?" 

The  above  items  are  a general  outline  of  what  should  be  covered  for 
flights  in  all  aircraft.  In  addition,  the  type  of  airplane  will  deter- 
mine if  the  use  of  oxygen,  bailout  procedures,  etc.,  will  beincluded. 

A PPB  however,  is  not  completed  by  the  sum  of  its  parts.  There  is 
an  intangible  portion  which  can  easily  be  the  deciding  factor  of  its 
effectiveness.  This  is  the  portion  of  the  PPB  which  the  aviator  chooses 
to  share  with  his  passengers.  The  majority  of  the  passengers  carried  in 
Army  aircraft  have  little  knowledge  of  aviation  in  general  and  the  air- 
craft in  particular.  Whether  they  realize  it  or  not,  their  health  and 
comfort  - even  their  lives  - may  depend  on  how  well  the  pilot  did  PPB. 

Be  sure  they  get  a good  one! 
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Well 


Did  You 

Know? 


Here  are  the  answers  to  the  questions  on  pages  19  and  20  . A refer- 
ence to  the  pertinent  regulation  and  paragraph  follows  each  answer. 

1.  A grounded  mast  establishes  a so-called  "cone  of  protection,"  the 
height  of  which  is  the  height  of  the  mast.  The  circular  base  of  the 
"cone"  has  a radius  equal  to  twice  the  height  of  the  mast.  The  mast 
shall  be  of  such  height  that  no  part  of  the  structure  to  be  protected 
extends  outside  of  the  cone.  Two  buildings  may  be  protected  by  the 
same  pole  provided  all  parts  of  these  buildings  fall  within  the  cone 
of  protection.  Reference  paragraph  8-llc,  AMCR  385-100. 

2.  When  the  possibility  of  a cook-off  exists,  the  danger  zone  for  per- 
sonnel in  the  vicinity  of  the  gun  when  firing  explosive  ammunition 
shall  be: 

a.  Machine  guns  - 200  yards  radius. 

b.  Guns  up  to  and  including  75mm  - 400  yards  radius. 

c.  Guns  over  75mm  to  105mm  - 600  yards  radius. 

d.  Guns  over  105mm  - 800  yards  radius. 

Reference  paragraph  28-18b,  AMCR  385-100. 

3.  Point-of-operation  is  that  point  at  which  cutting,  shaping  or  forming 

is  accomplished  upon  the  stock  and  includes  other  points  that  present 
a hazard  to  the  operator  inserting  or  manipulating  the  stock  in  the 
machine.  Well-designed  guards  will  protect  the  operator  from  contact 
at  the  danger  zone.  The  guards  shall  be  fixed  so  that  the  machine  op- 
erator cannot  remove  or  displace  them.  Reference  paragraph  9-19a(2), 


AMCR  385-100. 


23 


4.  The  maximum  electrical  resistance  permitted  for  each  shoe,  conductive 
rubber  or  other  type  of  conductive  footwear  is  450,000  ohms. 

Reference  paragraph  10-12b,  AMCR  385-100. 

5.  At  least  1,000,000  gallons  of  water  shall  be  stored  or  available  for 
fire  fighting  in  load  line  and  in  explosives  manufacturing  areas. 

Water  for  fire  fighting  shall  be  from  two  supply  sources.  Reference 
paragraph  12-28a,  AMCR  385-100. 

6.  When  diluting  a significant  quantity  of  acid  with  water,  the  acid 
shall  be  added  to  the  water  and  never  vice  versa.  Acid  should  be 
added  slowly  with  agitation.  Similar  precautions  should  be  taken 
when  using  a weak  acid  instead  of  water  as  a diluting  agent.  Thorough 
mixing  should  be  given,  particularly  in  a steel  tank.  Reference 
paragraph  13-4h,  AMCR  385-100. 

7.  Safety  promotional  material  and  posters  not  available  from  the 
USAMC  Field  Safety  Agency,  for  which  a requirement  is  properly  justi- 
fied, should  be  procured  locally  with  major  subordinate  command,  in- 
stallation, or  activity  funds  without  referral  to  Headquarters,  AMC , 

or  the  USAMC  Field  Safety  Agency.  Reference  page  5,  paragraph  3-2c(8), 
AMC  Suppl  1 to  AR  385-10. 

8.  The  physiological  effects  of  mustard  agent  are  as  follows: 

a.  Eye  effect : The  eye  is  most  vulnerable  to  mustard  either  by 

liquid  or  vapor  contact.  Conjunctivitis  (red  eye)  can  occur  fol- 
lowing an  exposure  to  a vapor  concentration  barely  detectable  by 
odor.  Long  exposures  to  low  concentrations  or  exposure  to  high 
concentrations  can  result  in  permanent  eye  damage. 

b.  Skin  effects : The  initial  effect  after  skin  contact  with  either 

vapor  or  liquid  is  a reddening  of  the  skin  similar  to  sunburn; 
exce  Pt  with  mild  vapor  burns,  the  reddening  progresses  to  blister- 
ing and  tissue  destruction.  The  initial  exposure  is  not  accom- 
panied by  any  sensation,  but  as  symptoms  develop  there  may  be  an 
itching  or  burning  sensation. 

c.  Respiratory  effect : Inhalation  of  mustard  vapor  or  aerosol  causes 

damage  to  the  mucous  tissues  of  the  upper  respiratory  tract. 

Damage  develops  slowly  and  may  not  reach  maximum  severity  for 
several  days  following  exposure.  The  symptoms  are  hoarseness, 
sore  throat,  and  coughing.  In  cases  of  severe  exposure  there  is 

a predisposition  to  secondary  infection  such  as  bronchial 
pneumonia . 

Reference  paragraphs 2-3b  (1) , (2)  and  (3),  AMCR  385-31. 
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9.  Demolition  snake  charges  are  considered  class  7 items  under  storage 
compatibility  group  G.  Reference  Table  19-1,  AMCR  385-100. 

10.  Section  E of  the  DA  Form  285  will  be  completed  by  full-time  safety 
personnel  at  the  lowest  echelon  of  command  where  such  personnel  are 
assigned.  Reference  paragraph  la(7),  Reports  Column,  Appendix  H, 
AMC  Suppl  1 to  AR  385-40. 


REFERENCE  PUBLICATIONS 


AR  40-13  Medical  Services  - Radiological  Emergency  Medical 

2 Nov  72  Teams  (REMT) 


AR  50-5  Nuclear  Weapons  and  Materiel  - Nuclear  Surety 

24  Oct  72 


AMC  Suppl  #1 
to  AR  385-10 
7 Nov  72 

AMC  Suppl  #1 
to  AR  385-14 
24  Oct  72 


Safety  - Army  Safety  Program 


Safety  - Accident/incident  Report  - Shipments  of  Con- 
ventional Explosives  and  Dangerous  Articles  by 
Commercial  Carriers 


CTA  50-914  Individual  Safety  and  Protective  Clothing  and  Equipment 

29  Sep  72 
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PICATINNY  ARSENAL  RECIPIENT  OF 
MUNITIONS  COMMAND  AWARD  OF  HONOR 


MG  Erwin  M.  Graham,  Jr.  (left).  Commanding  General,  US  Army  Munitions 
Command,  is  shown  presenting  the  Munitions  Command  Award  of  Honor  for  an 
outstanding  safety  record  to  CGL  George  M.  Montgomery,  Commanding  Officer, 
and  Robert  E.  Young,  Chief,  Safety  Office,  Picatinny  Arsenal. 


ffSSi 


